Lucene search
K

10 matches found

CNNVD
CNNVD
added 2024/01/08 12:0 a.m.1 views

GetSimple CMS 跨站脚本漏洞

GetSimple CMS is a content management system CMS written in PHP. A cross-site scripting vulnerability exists in GetSimple CMS version 3.3.16, which stems from the lack of effective filtering and escaping of user-supplied data when adding articles to the /admin/edit.php page, and can be exploited ...

5.4CVSS6.2AI score0.00196EPSS
Exploits0References3
OSV
OSV
added 2022/03/25 5:15 p.m.1 views

CVE-2022-25582

A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...

5.4CVSS5.9AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/25 5:15 p.m.1 views

CVE-2022-25582

A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...

5.4CVSS5.5AI score0.00206EPSS
Exploits1References2
NVD
NVD
added 2022/03/25 5:15 p.m.13 views

CVE-2022-25582

A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...

5.4CVSS0.00206EPSS
Exploits1References1
Prion
Prion
added 2022/03/25 5:15 p.m.13 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Articles field...

3.5CVSS5.3AI score0.00206EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/03/25 12:0 a.m.1 views

ClassCMS 跨站脚本漏洞

A cross-site scripting vulnerability exists in ClassCMS v2.5 and prior versions of ClassCMS, a simple, flexible, secure, and easily extensible content management system in China. The vulnerability stems from a lack of user-supplied data and output data validation filtering in the Add Articles fie...

5.4CVSS5.6AI score0.00206EPSS
Exploits1References2
NVD
NVD
added 2021/09/15 10:15 p.m.8 views

CVE-2020-21321

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

4.3CVSS0.00141EPSS
Exploits1References1
Prion
Prion
added 2021/09/01 10:15 p.m.18 views

Cross site request forgery (csrf)

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...

4.3CVSS6.5AI score0.00098EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/09/01 9:25 p.m.12 views

CVE-2020-20343

WTCMS 1.0 contains a cross-site request forgery CSRF vulnerability in the index.php?g=admin&m=nav&a=addpost component that allows attackers to arbitrarily add articles in the administrator background...

6.5AI score0.00098EPSS
Exploits1References1
myhack58
myhack58
added 2011/06/25 12:0 a.m.33 views

High-speed Ankang School Site program v3. 1. 1 cookie injection vulnerability-vulnerability warning-the black bar safety net

PS:seems to be oyaya kernel. Use the system notes: 1. The present program consists of extreme well-being and development,the symbolic charge a little Fee for everyone to use! 2. The present system for sharing procedures,the user the freedom to choose whether to use,in use, any problems and losses...

7.3AI score
Exploits0
Rows per page
Query Builder